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Abstract. We use elementary techniques to study elliptic curves over Q of 
conductor N equal to the product of two distinct odd primes. Using a result 
of Iwaniec on the representation of almost-primes by quadratic forms, we show 
that infinitely many N equal to a prime or the product of two distinct odd 
primes arise as the conductors of elliptic curves over Q. Inspired by earlier 
work in the case of prime conductor, we also provide a non-existence result: 
We show that there are no elliptic curves over Q of conductor N when TV is 
the product of two primes satisfying certain congruency and quadratic class 
number conditions. We use a computer to find all 67 values of N < 10 7 
satisfying these conditions. 
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1. Introduction 

In this paper we use elementary techniques to study elliptic curves over Q of 
conductor N equal to the product of two distinct odd primes. The primary aim of 
this work was to find infinitely many elliptic curves over Q with conductors having 
a small number of prime factors. Although we were unable to prove the existence of 
an infinite family of curves of differing prime conductor, we were able to construct 
families containing infinitely many curves having different conductors equal to the 
product of at most two distinct primes. This is the contents of our first main result, 
Theorem[TJ In our second main result, Theorem!?] we provide a non-existence result 
that applies to certain conductors of this form. 

While elliptic curves of prime conductor were studied extensively in the 1960s 
and 70s using the techniques of basic class field theory and diophantine analysis (see 
the classic work of Neumann [8] , Ogg [9j [10] , Setzer [12] , and Brumer and Kramer 
[2] Sec. 5 and 6]), with the exception of Hadano's [4 work on conductors of the 
form 2 m p, to the best of our knowledge these techniques have not been extended to 
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any more general conductor N. In Section [3] we employ techniques similar to this 
classical work in order to show that there are no elliptic curves of conductor N = pq 
for p and q odd primes satisfying certain congruency and quadratic class number 
conditions (Theorem [7]) • Taking advantage of modern computing power we find all 
67 values of N < 10 7 satisfying these conditions (Table [2]) , giving many examples 
of large N of this form such that there are no elliptic curves over Q of conductor N, 
most of which are not contained in John Cremona's tables of elliptic curve data [3] . 
Furthermore, by considering conductor equal to the product of two primes instead 
of just a single prime we are also able to provide an infinite existence result: in 
Section [2] (Theorem [1] and Corollary [3| we show that there infinitely many natural 
numbers N equal to either a prime or the product of two distinct odd primes such 
that there exists an elliptic curve over Q of conductor N. 

Acknowledgements. This work grew out of the first author's undergraduate the- 
sis at the University of Arizona, advised by the second author. We would like to 
thank Bas Edixhoven and Jaap Top for their help and encouragement in bring- 
ing this work to its current state. The first author was supported by an Erasmus 
Mundus scholarship and enrolled in the ALGANT integrated master course during 
part of the preparation of this paper. 

2. Existence results 

In Theorem [1] the main result of this section, we produce families of elliptic 
curves such that in each of these families infinitely many natural numbers N equal 
to a prime or the product of two distinct odd primes arise as conductors: 

Theorem 1. Let a,b € Z be such that at least one of a and b is not divisible by 3 
and such that 

a 12 - 9 a s b + 27 aV - 27 b 3 

is not a square. Then there exist infinitely many n £ Z such that the Weierstrass 
equation 

(2.1) y 2 + y = x 3 + ax 2 + bx + n 

has discriminant of the form A(n) = — pq for p an odd prime and q either 1 or an 
odd prime distinct from p. In particular, for such a value of n this equation gives 
a global minimal model of an elliptic curve with conductor N = pq, and there are 
infinitely many natural numbers N of this form arising as conductors of curves in 
this family. 

Proof. The elliptic curve E defined by Equation 12.11 has discriminant 

A(n) = (-432)n 2 + (-64a 6 + 288a 2 6 - 216)n+ (-16a 6 + 16a 4 6 2 - 646 3 + 72a 2 6 - 27) . 

In particular, considering this as a quadratic polynomial in n, the leading coef- 
ficient -432 is divisible only by 2 and 3, but the constant coefficient is odd and by 
our condition on a, b mod 3 either the coefficient of n or the constant coefficient is 
not divisible by 3, thus the gcd of the coefficients is 1. Furthermore, a calculation 
shows that if we consider A(n) as a quadratic polynomial in n then its discriminant 
is equal to 

2 12 -(a 12 -9a 8 6 + 27a 4 6 2 - 27 6 3 ) 
which by hypothesis is not square and thus A(n) is an irreducible polynomial in n. 
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Thus, by Iwaniec's theorem on quadratic forms (stated below as Theorem [2]), 
there are infinitely many integers n such that the quadratic form inside the paren- 
theses takes on a value with at most 2 prime factors. Since A(n) = 5 mod 8, these 
values are never plus or minus a square, thus at these n 

A(n) = ±pq, 

where p is an odd prime and q ^ p is either 1 or an odd prime. Fix such an n. 
Because every prime appears in A(n) with exponent less than 12, this must be 
a minimal discriminant at all primes and thus Equation 12.11 is a global minimal 
Weierstrass equation. 

Recall that an elliptic curve has good reduction at a prime if and only if that 
prime does not divide the minimal discriminant and multiplicative reduction at a 
prime if and only if that prime divides the minimal discriminant but not the quantity 
C4 associated to a minimal Weierstrass equation [13l Prop. 5.1]. In particular, since 
1728 A = c| — c|, any prime other than 2 or 3 dividing A and C4 (and thus having 
additive reduction) divides A to a power higher than 1. Since A(n) is odd, neither 
p nor q is 2, and since no prime divides A(n) to a power higher than 1, any p or q 
not equal to 3 has multiplicative reduction. However, for Equation l2.1[ 

c 4 = 16a 4 - 486 

which is divisible by 3 if and only if a is. But if a = 0mod3, then A(n) = 2b 3 modn 
and since not both a and b are divisible by 3, A(n) is not divisible by 3. Thus if 
p or q is 3 the curve still has multiplicative reduction and we conclude that the 
conductor is exactly N = pq. 

Finally, the formula for A(n) shows that the infinitely many n given by Iwaniec's 
theorem give rise to infinitely many distinct discriminants, from which we deduce 
the final statement of the theorem. □ 

In the proof of the above we made use of the following theorem of Iwaniec [S] 
Sec. 1]: 

Theorem 2 (Iwaniec [6] Sec. 1]). Let G(x) — ax 2 + bx + c be an irreducible 
polynomial over Z. If a > and c = 1 mod 2 then there are infinitely many n G Z 
such that G(n) has at most two prime factors (counted with multiplicity). 

Note that Iwaniec also provides an estimate on the number of such n. The fol- 
lowing is a straightforward corollary of Theorem [TJ 

Corollary 3. There are infinitely many natural numbers N equal to either a prime 
or the product of two distinct odd primes such that there exists an elliptic curve 
over Q with conductor N . 

Remark. In the proof of Theorem Q] we observed that the discriminant A(n) is 
always congruent to 5 mod 8 for the curves produced. This shows that p and 
q are never both congruent to ±1 mod 8, giving an obvious separation from the 
primes appearing in our nonexistence results later on which will all be congruent 
to ±1 mod 8. We also note that the condition that one of a and b not be divisible 
by 3 is necessary for our method since otherwise A(n) = mod 3. In Tabic [1] we 
calculate the prime or almost prime N < 1000 appearing as conductors of curves 
in the families of Theorem [1] for \a\, \b\, \n\ < 100. 
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Remark. The condition that a 12 — 9a s b+ 27 a A b 2 — 27 b 3 not be square is satisfied, 
for instance, if b is much larger than \a\ so that the quantity is negative, or if 
(a, b) mod 8 is one of (0,1), (0,3), (0,7), (1,2), (1,4), (1,6), (2,1), (2,3), (2,7), 
(3,2), (3,4), (3,6), (4,1), (4,3), (4,7), (5,2), (5,4), (5,6), (6,1), (6,3), (6,7), (7,2), 
(7, 4), or (7, 6). For a fixed generic value of b (resp. a) the curve 

y 2 = a 12 - 9 a s b + 27 a 4 b 2 - 27 b 3 

has genus greater than 0, thus by Siegel's theorem there will be at most finitely 
many integer values of a (resp. b) such that this quantity is a square. 

Remark. A well-known conjecture of Hardy and Littlewood on quadratic polyno- 
mials (see [5] for the original conjecture or [I] for a more recent survey) implies that 
for any of the families to which Theorem [T] applies there are infinitely many values 
of n giving prime conductor (i.e. such that A(n) has one prime factor). Concretely, 
the conjecture says that 

logx 

where p{x) is the number of positive n < x such that A(n) has a single prime factor 
and gives a formula for the constant C, which in our case will depend on a and b. 
For example, when a = b = 1 our theorem applies, 

A(n) = -432?i 2 + 8n - 19, 

and we calculate C ~ 0.063. When a = 0, b = 1, C ~ 0.162. 

Remark. Setzer [T21 Thm. 2] showed that for p ^ 2, 3, 17 there is an elliptic curve 
of conductor p with a rational 2-torsion point if and only if p = u 2 + 64 for some 
integer value of u. It is not known whether or not there are infinitely many primes 
of this form, and because 64 is not odd we cannot apply Iwaniec's theorem to say 
that there are at least infinitely many almost primes of this form. 



3. Non-existence results 

Following the approach of Setzer |12j for prime conductor, we first show that 
under certain class number conditions an elliptic curve of conductor N equal to a 
product of distinct primes must have a rational point of order 2 (Theorem [4]) . We 
then use the existence of such a point in the special case where N is the product of 
two odd primes in order to construct a solution of a Diophantine equation (Theorem 
[SJ, and then give conditions under which these Diophantine equations have no 
solution (Proposition [5]). We conclude by combining these results in order to show 
that under certain class number and congruency conditions on primes p and q there 
can be no elliptic curve of conductor N = pq (Theorem [7]) and in Table [2] we list 
all 67 values of N = pq < 10 7 to which this result applies. 

3.1. Forcing a rational point of order 2. 

Theorem 4. Let N — p\...p n be a product of distinct primes such that either 
Pi = 2 for some i or pi = ±1 mod 8 for all 1 < i < n and suppose that for any 
m = ±pi 1 ...pi n 1 < i\ < ii < ... < ii < n the class number of Q(y / m) is not 
divisible by 3. Then any elliptic curve over Q of conductor N has a rational point 
of order 2. 
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Proof. Let E be an elliptic curve over Q of conductor N with minimal discriminant 
A. Suppose E has no rational point of order 2. It then follows from a result of 
Brumer and Kramer [2] Cor. 5.3] that Q(VA) has class number divisible by 3 (the 
only subtlety in applying their result comes when all the pi are odd, in which case 
one must make the observation that A, as plus or minus a product of these pi to 
some powers, cannot be congruent to 5 mod 8 and thus E is not supersingular at 
2 by part (2) of the cited corollary). However, the field Q(y/~A) is equal to a field 
of the form Q(^/m) for m = ±pj x ...pi, , 1 < i\ < %2 < ■■■ < h < n or m = ±1, and 
thus we obtain a contradiction since by our hypothesis (or by standard result for 
m = ±1) the class number of this field is not divisible by 3. □ 

Remark. The result of Brumer and Kramer cited in the proof of Theorem is a 
corollary of Serre's [11] detailed description of the Galois action on torsion points 
of a semi-stable elliptic curve over Q, from which Brumer and Kramer also derive 
many more interesting results about the two and three torsion of semi-stable curves. 
We should note, however, that it is also possible to give a simple direct proof of 
Theorem 0] using only basic class field theory to analyze the two-torsion field. A 
proof along these lines is a straightforward generalization of the work of Ogg [9] [10] 
and Setzer [12j in the case of prime conductor, and thus we omit it here. 

3.2. Diophantine analysis of curves with a rational point of order 2. Our 

first step is to develop a list of Diophantine equations (Theorem [5]) , one of which 
must have a solution if there exists a curve of conductor N = pq with a rational 
point of order 2. In Proposition [6] we use this list to show that under certain 
congruency conditions on p and q no curve with conductor N = pq can have a 
rational point of order 2. 

Suppose that E is an elliptic curve with conductor N = pq for distinct odd 
primes p and q and also that E has a rational point of order 2. Following Setzer 
[12] Sec. 2], we obtain an integral solution (A, B, a, f3) to the following: 

B 2 (A 2 - 4B) = ±2W , where: 
1 < a,/3 

p and q each divide at most one of A, B, 

. , . . . ... A = 1 mod 4 and B = mod 16 or 

one ot the following holds - . _ . „ . _ , . _ 
6 A = 6 mod 8 and B = 1 mod 8 



In particular, taking into account the congruency conditions and the fact that 
each of p and q divide at most one of A and B, we see that the only possible 
values of B are 1, ±16, ±p a / 2 (when a is even and this is congruent to 1 mod 8), 
±qP/ 2 (when /3 is even and this is congruent to lmod8), ±16p a ^ 2 (when a is even), 
±l6q 13 / 2 (when j3 is even), ±p a l 2 qPI 2 (when a and (3 are even and this is congruent 
to 1 mod 8), and ±16p a ^ 2 q^^ 2 (when a and /3 are even). We analyze these cases: 

• If B = 1 then A 2 — 4 = ±256p Q g' 3 . When the righthand side is negative 
there is no solution. When the righthand side is positive, letting C = A—2, 

C(C + 4) = 256pV 

and since the only prime that can divide both C and C + 4 is 2 and C = 
4mod8 we see C — 2 2 p a and C + 4 = 2 & q 13 , possibly after swapping p and q. 
Thus 4 = 2 V - 2 2 P a , so we obtain either 1 = 2 i q fj -p Q or 1 = 2 i p a - q fj . 



ELLIPTIC CURVES OF ALMOST-PRIME CONDUCTOR 



6 



• If B = 16 then A 2 — 64 = ±p a qP . If the righthand side is negative then, up 
to swapping p and q, we obtain the finitely many solutions (remembering 
the congruency conditions on A and that p and q are odd) 

(A,p a ,qP)e {(1,3 2 ,7), (-3,5,11), (5,3,13), (-7,3,5)}. 

If the righthand side is positive then (A — 8) (A + 8) = p a q@ and since 
the only prime that can divide both A — 8 and A + 8 is 2, we conclude 
\p a - q P\ = 16. 

• If B = — 16 then A 2 + 64 = ±p a qP . If the righthand side is negative then 
there are no solutions. 

• In the rest of the cases, we make no reductions. 
In summary, we have shown: 

Theorem 5. If there is an elliptic curve over Q of conductor N = pq with a 
rational point of order 2 for p and q odd primes, and N is not 15, 21, 39, or 55, 
then, up to swapping p and q, one of the following diophantine equations has an 
integral solution (A, a, b) with a,b > 0: 

Equations 

(1) 1 = 2 4 q b -p a 

(2) \p a -q b \ = 16 

(3) A 2 + 64 = p a q b 

(4) A 2 ± 64q b = ±p a 

(5) A 2 ± Aq b = ±256p a and q b = ±1 mod 8, the sign being the opposite of that on Aq 

(6) A 2 ± Ap a q b = ±256 

(7) A 2 ± 64pV = ±1 

Setzer [T^l Thm. 2] uses a similar analysis to show that there exists an elliptic 
curve over Q of prime conductor ./V = p, p ^ 2, 3, 17 with a rational point of order 
2 if and only if there is a solution to A 2 + 64 = p, the analogous condition to the 
third equation in our Theorem [5] Although the situation is less exact in the case 
of two primes, we can still give sufficient conditions on p and q for none of these 
equations to have a solution: 

Proposition 6. Suppose p and q are distinct primes such that p, q = 31 mod 60 

but p ^< q > where < q > is the subgroup generated by q in (Z/16Z) X . Then there 
is no elliptic curve of conductor N = pq with a rational point of order 2. 

Proof. By Theorem [5] it suffices to show that there is no solution to any of the 
diophantine equations listed in the table therein (as well as those with the roles of 
p and q swapped) 

From equation (1), we obtain 1 = mod 3, a contradiction. 

From equation (2), we obtain p a = q b mod 16. With our conditions on p and q 
modulo 16, a simple analysis shows this can only happen when a and b are both 
even. If p a > q b then 

q b = p a - 16 = (p a/2 - 4)(p a/2 + 4) 
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but the only prime that can divide bothp a / 2 — 4 andp a / 2 +4 is 2 and thusp a//2 — 4 = 1 
and p a / 2 +4 = q b , and thus p — 5, a contradiction to p = 1 mod 5. We obtain a 
similar contradiction if q b > p a . 
From equation (3), we obtain 

(A + 8i)(A-8i)= P a q 13 

but since p, q = 3 mod 4 they are prime in Z[i] and thus since neither can divide 
both A + 8i and A — 8i (they do not divide 16i), both A + 8i and A — 8i are equal 
to rational integers times a unit in Z[i], but ^4 is a rational integer so this cannot 
be the case. 

Under our conditions, the equations in (4), (5), (6), and (7) all reduce mod 3 
and mod 5 to: 

A 2 ± 1 = ±1 mod 3 
A 2 ±(~l) =±lmod5 

If both signs are positive then any solution gives that 2 is a square mod 5, a 
contradiction. If both signs are negative, a solution gives that 3 is a square mod 5, 
again a contradiction. If the first sign is negative and the second is positive, then 
a solution gives that 2 is a square mod 3, a contradiction. Finally if the first sign 
is positive and the second is negative, then in all cases a solution gives a positive 
number equal to a negative number, again a contradiction. □ 

3.3. Results. 

Theorem 7. Suppose p and q are distinct primes such that p = 7 mod 16, q = 
15modl6, andp,q = lmodl5. Suppose furthermore that none of the class numbers 
of Q(y/±p), Q(y/±q), and Q(y/±pq) are divisible by 3. Then there are no elliptic 
curves of conductor pq. 

Proof. By Theorem 01 any such curve will have a rational point of order 2, but by 
Proposition [6] there is no such curve with a rational point of order 2. □ 

In contrast to our existence result in Theorem [TJ here we are not able to make 
an infinite non-existence statement because we cannot guarantee that there are 
infinitely many p and q satisfying the given class number conditions (we note that 
Kishi and Miyake [7] have given a characterization of quadratic fields with class 
number divisible by 3, but we were unsuccesful in adapting this classification to 
our purposes). Still, by running a simple exhaustive search Theorem [7] allows us 
to quickly compute many examples of large N = pq such that there is no elliptic 
curve of conductor N. Tabic [2] lists all 67 of the N = pq less than 10 7 to which 
Theorem [7] applies. In particular, we note that only three of these ./V are less than 
210000 and thus the rest are not contained in Cremona's tables [3]. There are a 
total of 697 values of N = pq less than 10 7 satisfying the congruency conditions 
of Theorem [71 and thus the class number conditions are satisfied about l/10th of 
the time. It is interesting to note that among the 17 values of N = pq less than 
210000 satisfying the congruency conditions of Theorem [71 none of them occur as 
the conductors of elliptic curves (according to Cremona's tables; as noted above, 
our Theorem [7] applies to only three of them), however, this is probably insufficient 
to make any sort of conjecture. The source code for the SAGE program used to 
produce Table [2] is available by request to the authors. 
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4. Tables 

Table Q] lists the prime or almost prime N < 1000 appearing as conductors of 
curves in the families of Theorem Q] for \a\, \b\, \n\ < 100. Table[2]hsts the 67 values 
of N = pq less than 10 7 to which Theorem [7] applies. 

Table 1: All prime or almost prime conductors TV < 1000 coming 
from families as in Theorem ffl with \a\ < 100, \b\ < 100, \n\ < 100 
and an equation giving rise to each. 





Equation 




AT 

jy 




y 2 + y = x 3 — x 2 


+ x 


N = 


in/ • \ 

= 19 (prime) 




y 2 + y = x 3 


— X 


N = 


= 37 (prime) 


y 2 + 


y — x 3 — 2x 2 — 7x - 


31 


AT 


an ( ' ~\ 

= 67 (prime) 




y +y = x 


+- X 


N = 


= 91 = 7 • 13 


y 2 + 


y — x 3 — 2x 2 — 2x - 


- 85 


iv 


1/11 O A *7 

141 =6-4:1 




y 2 + y = x 3 — 2x 


+ 1 


\ = 


163 (prime) 




y 2 + y = x 3 — x 


- 1 


AT 

Jy = 


179 (prime) 




y 2 + y = x 3 — 5x 


+ 4 


AT 

iv = 


197 (prime) 




y 2 + y = x 3 — 2x 


— 1 


N 


269 (prime) 




y 2 + y = x 3 + x 


- 1 


1 v — 


^07 /nrimp - ! 




y 2 + y = x 3 — x 2 4 


2x 


N = 


347 (prime) 


y 2 


+ y = x 3 — x 2 — 2x 


- 2 


N = 


373 (prime) 


y 2 


+ y = x 3 — 2x 2 + x 


- 7 


N = 


381 = 3 • 127 




y 2 + y = x 3 — x 2 - 


2x 


N = 


389 (prime) 


y 


2 + y = x 3 — x 2 + x 


+ 1 


N = 


443 (prime) 




y 2 + y = x 3 — Ax 


+ 3 


N = 


467 (prime) 




y 2 + y = x 3 — 


2x 


N = 


485 = 5 • 97 




y 2 + y = x 3 — 2x 2 


+ x 


N = 


571 (prime) 




y 2 + y = x 3 — x 


+ 1 


N = 


611 = 13-47 


y 2 + y = x 3 - 2x 2 + 2x 


- 5 


N = 


723 = 3 • 241 




y 2 + y = x 3 + x 


+ 1 


N = 


739 (prime) 




y 2 + y = x 3 + 2x 


- 1 


N = 


755 = 5 • 151 




y 2 + y = x 3 — 2x 


- 2 


N = 


811 (prime) 


y 2 


+ y = x 3 — x 2 — 2x 


- 1 


N = 


813 = 3 • 271 




y 2 + y = x 3 — lOx -\ 


- 12 


N = 


827 (prime) 




y 2 + y = x 3 — Ax 


-3 


N = 


829 (prime) 


9 

y 


+ y = x 3 — x 2 — 2x 


+ 1 


N = 


899 = 29-31 




y 2 + y = x 3 — hx 2 4 


5x 


N = 


973 = 7 • 139 



Table 2: The 67 values of N = pq < 10 7 such that Theorem [7] show 
there is no elliptic curve of conductor N. 



N 


P 


q 


40921 


151 


271 


149641 


151 


991 


171001 


631 


271 


403321 


151 


2671 


496201 


1831 


271 
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548281 


151 


3631 


625321 


631 


991 


626281 


2311 


271 


691321 


2551 


271 


693241 


151 


4591 


928201 


631 


1471 


951481 


3511 


271 


1055641 


151 


6991 


1454281 


151 


9631 


1635481 


151 


10831 


1671721 


151 


11071 


1685401 


631 


2671 


1814521 


1831 


991 


1889161 


151 


12511 


2179081 


151 


14431 


2252281 


8311 


271 


2432761 


151 


16111 


2528041 


2551 


991 


2650201 


151 


17551 


2693401 


1831 


1471 


3338761 


151 


22111 


3479401 


3511 


991 


3748201 


13831 


271 


3752521 


2551 


1471 


3943321 


14551 


271 


4172281 


151 


27631 


4317241 


151 


28591 


4715881 


151 


31231 


4890601 


1831 


2671 


4906441 


4951 


991 


5164681 


3511 


1471 


5331961 


151 


35311 


5730601 


151 


37951 


5803081 


151 


38431 


5925721 


631 


9391 


6077161 


631 


9631 


6095641 


6151 


991 


6172681 


2311 


2671 


Do4yoUl 


93/1 31 


071 
Ail 


6414841 


23671 


271 


6648361 


1831 


3631 


6813721 


2551 


2671 


6985801 


631 


11071 


6999001 


151 


46351 


7071481 


151 


46831 


7390441 


27271 


271 


7780681 


28711 


271 


7832521 


151 


51871 
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8122441 
8235961 
8267401 
8406121 
8412361 
8651641 
8774761 
9105961 
9262681 
9341641 
9377881 
9572041 
9666841 
9731881 



151 
30391 
151 
1831 
151 
631 
151 
631 
2551 
34471 
3511 
151 
35671 
35911 



53791 

271 
54751 
4591 
55711 
13711 
58111 
14431 
3631 
271 
2671 
63391 
271 
271 
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